v3.0.1

Compare Source

Fixed:

• Security issue: an attacker specifying a large "p2c" value can cause
  JSONWebEncryption.Decrypt and JSONWebEncryption.DecryptMulti to consume large
  amounts of CPU, causing a DoS. Thanks to Matt Schwager (@​mschwager) for the
  disclosure and to Tom Tervoort for originally publishing the category of attack.
  https://i.blackhat.com/BH-US-23/Presentations/US-23-Tervoort-Three-New-Attacks-Against-JSON-Web-Tokens.pdf

v1.3.0

Compare Source

This release adds support for slog in a new, self-contained logr/slogr package. Implementers of a logr.LogSink are encouraged, but not required, to extend their implementation to improve the quality of log output coming from a slog API call.

Breaking change: the call depth for LogSink.Enabled when called via Logger.Enabled was fixed to be the same as for other call paths. Implementers of a LogSink who have worked around this bug will need to remove their workarounds.

Security best practices were improved. Only Go versions >= 1.18 are supported by this release.

What's Changed

• Fix golangci-lint fails by @​thockin in https://github.com/go-logr/logr/pull/173
• Add minimal permissions to workflows by @​pnacht in https://github.com/go-logr/logr/pull/177
• Add a security policy by @​pnacht in https://github.com/go-logr/logr/pull/178
• Update security email by @​thockin in https://github.com/go-logr/logr/pull/181
• docs: explain relationship between Logger{} and Discard() by @​pohly in https://github.com/go-logr/logr/pull/182
• Add the OpenSSF Scorecard workflow by @​pnacht in https://github.com/go-logr/logr/pull/186
• README: show of OpenSSF Scorecard badge by @​pohly in https://github.com/go-logr/logr/pull/187
• Hash-pin workflow Actions by @​pnacht in https://github.com/go-logr/logr/pull/189
• Bump go versions to 1.18+ by @​thockin in https://github.com/go-logr/logr/pull/203
• slogr: add glue code for logging to slog.Handler and with slog.Logger by @​pohly in https://github.com/go-logr/logr/pull/205
• slogr: restore original backend when converting back and forth by @​pohly in https://github.com/go-logr/logr/pull/210
• slogr: add SlogSink by @​pohly in https://github.com/go-logr/logr/pull/211
• Use same call depth for Enabled, Info, Error by @​thockin in https://github.com/go-logr/logr/pull/218
• test: eliminate helper func by @​thockin in https://github.com/go-logr/logr/pull/219
• docs: interoperability with slog by @​pohly in https://github.com/go-logr/logr/pull/222

• build(deps): bump actions/setup-go from 3.5.0 to 4.0.1 by @​dependabot in https://github.com/go-logr/logr/pull/190
• build(deps): bump github/codeql-action from 2.20.1 to 2.20.3 by @​dependabot in https://github.com/go-logr/logr/pull/191
• build(deps): bump github/codeql-action from 2.20.3 to 2.20.4 by @​dependabot in https://github.com/go-logr/logr/pull/192
• build(deps): bump github/codeql-action from 2.20.4 to 2.21.0 by @​dependabot in https://github.com/go-logr/logr/pull/193
• build(deps): bump github/codeql-action from 2.21.0 to 2.21.2 by @​dependabot in https://github.com/go-logr/logr/pull/194
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.3 by @​dependabot in https://github.com/go-logr/logr/pull/207
• build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @​dependabot in https://github.com/go-logr/logr/pull/206
• build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @​dependabot in https://github.com/go-logr/logr/pull/209
• build(deps): bump github/codeql-action from 2.21.3 to 2.21.4 by @​dependabot in https://github.com/go-logr/logr/pull/208
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @​dependabot in https://github.com/go-logr/logr/pull/214
• build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by @​dependabot in https://github.com/go-logr/logr/pull/217
• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @​dependabot in https://github.com/go-logr/logr/pull/220
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @​dependabot in https://github.com/go-logr/logr/pull/221
• build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 by @​dependabot in https://github.com/go-logr/logr/pull/223
• build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by @​dependabot in https://github.com/go-logr/logr/pull/224
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @​dependabot in https://github.com/go-logr/logr/pull/225
• build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by @​dependabot in https://github.com/go-logr/logr/pull/226
• build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @​dependabot in https://github.com/go-logr/logr/pull/227
• build(deps): bump github/codeql-action from 2.21.9 to 2.22.0 by @​dependabot in https://github.com/go-logr/logr/pull/228
• build(deps): bump github/codeql-action from 2.22.0 to 2.22.3 by @​dependabot in https://github.com/go-logr/logr/pull/229
• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @​dependabot in https://github.com/go-logr/logr/pull/231
• build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 by @​dependabot in https://github.com/go-logr/logr/pull/230

New Contributors

• @​pnacht made their first contribution in https://github.com/go-logr/logr/pull/177
• @​dependabot made their first contribution in https://github.com/go-logr/logr/pull/190

Full Changelog: go-logr/logr@v1.2.4...v1.3.0

v0.7.5

Compare Source

v9.3.0: 9.3.0

Compare Source

What's new?

JSON support

We are continuing to add support for more Redis data types in Go-Redis. Today, we are happy to announce support for JSON. JSON is a Redis data structure for storing, querying, and manipulating a single JSON document.

With a JSON key in Redis, you can:

• Use it as a versatile hierarchical data type
• Opt for it as a sophisticated alternative to the traditional hash data structure
• Treat it as a singular document in a document-based database

The following example demonstrate how to get started with JSON in Go-Redis:

var ctx = context.Background()
client := redis.NewClient(&redis.Options{
	Addr: "localhost:6379",
})

type Bicycle struct {
	Brand       string
	Model       string
	Price       int
}

bicycle := Bicycle{
	Brand: "Velorim",
	Model: "Jigger",
	Price: 270,
}

_, err := client.JSONSet(ctx, "bicycle:1", "$", bicycle).Result()
if err != nil {
	panic(err)
}

res, err := client.JSONGet(ctx, "bicycle:1", ".Model").Result()
if err != nil {
	panic(err)
}
fmt.Println("bicycle:1 model is", res)

Learn more about JSON support in Redis

Other notable improvements

• Allow using pointers of simple data types as command values (#​2745) (#​2753)
• Add InfoMap command (#​2665)

🐛 Bug Fixes

• Handle wrapped errors in scripter.Run (#​2674)
• BUG: BFReserveArgs - error_rate & capacity (#​2763)
• fix: free turn of connection pool when leave with error (#​2658)
• Add BitMapCmdable to Cmdable. (#​2737)

🧰 Maintenance

• Option types must propagage missing fields (#​2726)
• fix missing fields in different Options (#​2757)
• update PubSub.Channel documentation (#​2761)
• Linking to Redis learning resources (#​2759)
• Creating CODEOWNERS for documentation (#​2749)
• chore(deps): bump rojopolis/spellcheck-github-actions from 0.33.1 to 0.34.0 (#​2740)
• chore(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.3 in /example/otel (#​2775)
• chore(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /example/otel (#​2776)
• Fix OpenTelemetry link in README (#​2755)

Contributors

We'd like to thank all the contributors who worked on this release!

@​Sovietaced, @​chayim, @​chenjie199234, @​cyningsun, @​dependabot, @​dependabot[bot], @​fred84, @​nic-gibson, @​ofekshenawa, @​peczenyj, @​sethrylan, @​snaffi, @​tzq0301 and @​vmihailenco